MICROSOFT SERVERS: INSTALL YOUR ECC SSL CERTIFICATE
Microsoft Servers: Create ECC CSR
FIRST, YOU MUST IMPORT YOUR ECC SSL CERTIFICATE IN TO THE CERTIFICATE STORE:
1. Starting from the Microsoft server where you made your CSR, open the zip file that includes your ECC SSL Certificate and save the file.
2. Then, as an Admin launch your Microsoft Management Console.
a. From the Windows Start window, Select your type as mmc.
b. Then, right-click on mmc.exe and then Select Run as administrator.
c. Next, locate the User Account Control screen, and Select Yes when asked to allow the program to make changes.
3. Next, from the MMC Console Select Certificates, and then Personal. Then, right-click on the Certificates option and choose All Tasks and Import.
4. You will then be prompted to the Certificate Import option, and the page will be labeled Welcome to the Certificate Import Wizard. Then, keep the option as the default and Select Next.
5. Then, you will be taken to the File to Import screen. There you will select Browse and click on the .crt certificate file you saved to your server. Then, Select Open and Next.
6. Next, comes the Certificate Store window where you will complete the information below:
a. Click Place all certificates in the following store.
b. Select Browse.
c. Under Select Certificate Store, Click Personal.
d. Choose OK.
e. Then, you will Select Next on the Certificate Store window.
7. Then, Select Finish after you have verified your settings on the Completing the Certificate Import window.
8. After you have completed all of the above, your ECC SSL Certificate is now in the Certificate Store.
HOW TO IMPORT THE DIGICERT ECC INTERMEDIATE CERTIFICATE INTO THE CERTIFICATE STORE:
1. As an Admin, open up the Microsoft Management Console.
a. From the Windows Start screen, enter in mmc.
b. Then, right-click on mmc.exe and Select Run as Administrator
c. From the User Account Control page, Select Yes when asked to allow the program to make changes.
2. Next, from the MMC Console Click on Certificates, then Personal and right click on Certificates. After that Select All Tasks and Import.
3. Then, you will be prompted to the Certificate Import Wizard titled Welcome to the Certificate Import Wizard. Here you will choose Next.
4. Then, from the File to Import screen, Select Browse to choose your DigiCertCA.crt file that you saved earlier. Then, Select Open and Next.
5. Once on the Certificate Store window, complete the information below:
a. Click Place all Certificates in the following store.
b. Select Browse.
c. Then, on the Select Certificate Store page, Click Intermediate Certification Authorities.
d. Select OK.
e. Then, from the Certificate Store screen, choose Next.
6. Then, you will see the Completing the Certificate Important window. Be sure to check to make sure your settings are the way you want them. If they are, Select Finish.
7. Now, your DigiCertCA.crt. intermediate certificate will be accessible in the Certificate Store.
HOW TO ASSOCIATE YOUR ECC SSL CERTIFICATE WITH ITS PRIVATE KEY:
1. First, find your ECC SSL Certificate and write down the serial number.
2. Then, As an Admin access your Microsoft Management Console.
a. Begin at the Windows Start screen, and enter in mmc.
b. Next, Right click mmc.exe and Select Run as Administrator.
c. Then, under the User Accounts Control page, Select Yes when asked to allow the program to make changes to the computer
3. Locate the MMC Console and Select Certificates and then Personal. There you will Select Certificates.
4. Next, find your ECC SSL Certificate and open it.
5. You will then see a Certificate screen, Select the Details option and view and write down your certificate’s serial number.
6. Next, As an Admin open the Command Prompt.
a. First, open the Windows Start screen and enter in cmd.
b. Then, right click on Command Prompt and Select Run as Administrator
c. From the User Account Control screen, Select Yes when prompted to Allow the Program to make changes to the computer.
7. Then, you will see a page that says Administrator: Command Prompt, enter in the following command: (Do not put any spaces in the serial number)
certutil -repairstore my “serial number”
8. Next, you will see a notification confirming the command:
certutil: –repairstore command completed successfully
9. Lastly, when you have imported your ECC SSL Certificate, you can configure your Microsoft server to secure your website.
Microsoft Servers: Create ECC CSR
Back To Guides